Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133382e302f32342d3234203d3e203138353330.roa
File:                     3139342e3135362e3133382e302f32342d3234203d3e203138353330.roa (raw, json)
Hash identifier:          EGCyrCAwZaSyQP4pNDQ03d3thIrNKx7u4q8cDqBMtAI=
Subject key identifier:   FD:4A:E1:83:CC:3E:2B:6A:B2:7A:A6:E8:4C:23:51:FD:EB:49:25:F6
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       0C6DF3D66D3018E33E25C26DDF90BA052C497C5A
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133382e302f32342d3234203d3e203138353330.roa
Signing time:             Fri 27 Nov 2020 15:10:23 +0000
ROA not before:           Fri 27 Nov 2020 15:05:23 +0000
ROA not after:            Fri 26 Nov 2021 15:10:23 +0000
asID:                     18530
IP address blocks:        194.156.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6d:f3:d6:6d:30:18:e3:3e:25:c2:6d:df:90:ba:05:2c:49:7c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 27 15:05:23 2020 GMT
            Not After : Nov 26 15:10:23 2021 GMT
        Subject: CN=3082010A0282010100D72D211EADDC2768979A715EAD52EEF477A350F7E6E5067B6FB7120158C1E3B825301D7BCCB28DF0AAB4490A6737CE3F66493B2738F39236621ED3C4300E0CB38D5D8FF4F5587A9A8C57873420A1CABC99CA9BC74F7515470DD4B25E010CC7AC25A5EC60D9AB84BB3F51675DB8B227DBB1177C03AC6B3A67F215C53CA312823568B5DCC8684190EE295F299C55A844B13861C17175DDB3757652631613529CCC9C76C1EC1CB90872F0F2EB617BAAE5B43902B083F2BFDE155A08878356D83C78F1957F6F3C87EDF22EC415D11BAFF0C141E56F488A258C065EDDCBAB114BD8970E103EC49B746A5BF44B6340B46E5D51BDCE5081D464BF19DDFE9CD7D770ADB10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:21:1e:ad:dc:27:68:97:9a:71:5e:ad:52:
                    ee:f4:77:a3:50:f7:e6:e5:06:7b:6f:b7:12:01:58:
                    c1:e3:b8:25:30:1d:7b:cc:b2:8d:f0:aa:b4:49:0a:
                    67:37:ce:3f:66:49:3b:27:38:f3:92:36:62:1e:d3:
                    c4:30:0e:0c:b3:8d:5d:8f:f4:f5:58:7a:9a:8c:57:
                    87:34:20:a1:ca:bc:99:ca:9b:c7:4f:75:15:47:0d:
                    d4:b2:5e:01:0c:c7:ac:25:a5:ec:60:d9:ab:84:bb:
                    3f:51:67:5d:b8:b2:27:db:b1:17:7c:03:ac:6b:3a:
                    67:f2:15:c5:3c:a3:12:82:35:68:b5:dc:c8:68:41:
                    90:ee:29:5f:29:9c:55:a8:44:b1:38:61:c1:71:75:
                    dd:b3:75:76:52:63:16:13:52:9c:cc:9c:76:c1:ec:
                    1c:b9:08:72:f0:f2:eb:61:7b:aa:e5:b4:39:02:b0:
                    83:f2:bf:de:15:5a:08:87:83:56:d8:3c:78:f1:95:
                    7f:6f:3c:87:ed:f2:2e:c4:15:d1:1b:af:f0:c1:41:
                    e5:6f:48:8a:25:8c:06:5e:dd:cb:ab:11:4b:d8:97:
                    0e:10:3e:c4:9b:74:6a:5b:f4:4b:63:40:b4:6e:5d:
                    51:bd:ce:50:81:d4:64:bf:19:dd:fe:9c:d7:d7:70:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4A:E1:83:CC:3E:2B:6A:B2:7A:A6:E8:4C:23:51:FD:EB:49:25:F6
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133382e302f32342d3234203d3e203138353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:33:9b:d2:3c:1e:75:54:20:ba:a4:06:94:59:78:5b:40:
         72:a2:3c:c0:a5:9d:8e:27:d4:d3:6e:b8:98:40:1d:27:77:42:
         db:1b:85:63:2d:79:c8:4c:29:56:1d:fd:d0:34:03:97:a2:8a:
         a1:4c:3d:60:a6:42:b6:1d:88:aa:7b:2e:d1:f0:84:85:2b:c1:
         8d:5e:7b:44:75:3a:a9:29:1d:d1:6d:8d:b9:b6:13:84:fd:f3:
         6e:b8:25:90:6a:dd:69:21:60:76:b4:d7:44:9f:d1:49:34:89:
         b7:15:9a:1b:68:74:1a:b2:b5:d6:a2:21:2f:d8:c8:fa:4c:80:
         13:27:0e:da:63:cc:c3:14:2d:14:4a:20:53:87:11:ed:5a:80:
         b3:8b:c0:ad:c7:ff:60:51:b0:a4:37:06:8d:99:9a:99:51:07:
         fe:e2:a2:05:10:8c:ad:d6:d3:b1:fe:53:7e:2b:4f:2b:cf:87:
         41:f3:9b:7f:72:a1:7d:91:e3:65:d0:8b:e0:06:22:bd:68:11:
         0f:7f:b9:88:ba:36:51:f5:90:24:25:0c:fd:37:d3:4f:97:97:
         78:eb:19:f0:83:40:a7:bc:44:f7:a4:36:f6:ba:6e:d9:03:74:
         c0:a6:44:e8:75:40:e9:5f:4a:e2:4a:61:27:98:87:80:2d:87:
         e6:9b:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----